Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa
File:                     f69346df-03dd-36c7-913b-c2f96bc60de7.roa (raw, json)
Hash identifier:          xiZVpRPezdAx8dRJ//J2MBX1unBH4saEUPkrJN2cc1Y=
Subject key identifier:   9A:B0:84:74:CA:A9:6A:92:57:65:65:97:93:D2:9E:15:EE:89:F3:2F
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584D2A74F9B6276A8C0A93661500
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     36734
IP address blocks:        204.10.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:f9:b6:27:6a:8c:0a:93:66:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=90f279b7-845b-4a13-912b-ec5b0b0c4d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:da:85:15:42:a7:11:51:69:8e:e5:9d:11:
                    eb:c0:fa:59:aa:e2:04:5b:5e:3b:15:76:24:de:f7:
                    b4:af:1e:ed:74:fc:43:73:05:4b:5f:a1:87:4f:d7:
                    22:6b:9f:eb:a3:af:53:53:d0:6a:fa:ce:79:cc:60:
                    25:44:c1:24:22:55:4a:8e:dd:73:b5:0d:fb:00:45:
                    ee:09:27:8e:23:be:6e:e2:8b:5c:3a:99:45:6a:53:
                    7b:39:44:1b:95:33:17:59:20:a0:d6:d6:c0:33:f6:
                    f1:5c:e2:d0:d6:fd:61:e7:a4:f7:14:c1:24:20:d3:
                    97:f4:03:a0:a9:3b:52:63:6c:e4:94:16:b0:cd:09:
                    b0:18:58:bb:66:84:03:ff:6e:24:9d:7f:72:a0:4f:
                    60:d4:12:d3:d4:b0:6e:eb:4d:b5:88:21:2c:64:5d:
                    93:d9:78:02:a8:8c:b5:70:0a:9f:61:b8:22:e8:ff:
                    cd:db:96:d8:de:b8:16:f4:d2:dc:aa:49:c1:9d:4f:
                    fc:e1:d1:9a:67:b3:01:e9:77:16:62:35:58:ad:16:
                    0c:95:8a:df:79:5a:02:ff:6d:3a:75:58:4d:de:ca:
                    9e:97:19:bb:67:d6:88:c7:bc:17:e1:4a:1e:fe:38:
                    b4:7a:b3:78:93:01:55:31:6d:63:e2:a0:6e:5a:eb:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:84:74:CA:A9:6A:92:57:65:65:97:93:D2:9E:15:EE:89:F3:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9b:f3:7e:11:4c:35:30:4c:0b:0c:cb:83:14:22:88:87:8d:
         2d:4d:5c:cf:70:a6:9d:39:e4:7d:d4:f6:1b:98:3d:6e:0c:c8:
         c5:8d:73:5b:0e:2c:5b:a5:e5:8b:ca:e6:7e:0f:77:4a:aa:d2:
         e1:f1:30:89:c4:25:a4:bd:39:36:d8:31:2a:89:5d:3e:5f:97:
         14:16:0d:1f:66:86:da:3b:02:04:ef:6c:8c:f4:f6:b9:8e:9e:
         a0:d1:b6:3c:b0:ac:1f:e7:68:75:7d:fa:62:0d:be:b1:76:8d:
         4c:1e:47:97:2f:26:5c:9a:48:b1:e0:bb:90:db:e0:96:14:aa:
         8a:13:1f:16:86:18:7f:db:65:39:9d:86:d2:fe:18:df:63:8b:
         f1:0d:5b:99:d2:32:56:64:15:06:ee:72:83:00:05:6a:db:d7:
         f8:73:1b:a3:5f:b2:66:16:b2:4c:f6:c8:7b:78:91:f2:b6:90:
         52:75:7c:52:39:7b:72:a4:f7:22:e8:62:c6:4d:e7:37:5a:09:
         ac:05:05:63:77:e0:03:ef:13:aa:35:eb:82:bc:d6:42:0b:ed:
         bd:fa:a5:c4:27:3b:ee:7d:48:19:03:9b:f9:45:4a:45:57:62:
         28:32:d8:ec:31:11:ed:54:6b:e5:6d:ad:f7:7b:af:3d:75:86:
         4c:f8:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:41 2026 by rpki-client